This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json) Hash identifier: CIQLr8yLDWsgq0qc6IsDGdOxJNcccrBHBCmwCLA0m5U= Subject key identifier: BA:C4:68:41:3D:8E:03:6A:84:65:52:87:F7:35:64:61:D6:AC:C4:8C Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc Certificate serial: 019BF506F6D472B50852B3A46568761547EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft Manifest number: 0941 Signing time: Sun 25 Jan 2026 12:00:32 +0000 Manifest this update: Sun 25 Jan 2026 12:00:32 +0000 Manifest next update: Mon 26 Jan 2026 12:00:32 +0000 Files and hashes: 1: Q3uvcJk1aivu7ToH0eZwM2MePrY.roa (hash: j0i6DOSkvpYiLwStrAAsU53hjHyyfEDy63fjeik32sA=) 2: QBmUJCRtL8qMx8nsM_8h7M8Ntmk.roa (hash: oRqg090yxLTopHF59OGl/QFkoOTyNIVLSNChAWZxm8c=) 3: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: LQU6aKHmf4e681d0EQ9h6xZ/7lJCLzAD/DgzWxZRRwU=) 4: _6K6ekLgN63ACFr7Nc4QqX8mO9Q.roa (hash: GR7VM23RiAdX5cDnkEi212fYKZ9tRoD66kVKX08kLSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:06:f6:d4:72:b5:08:52:b3:a4:65:68:76:15:47:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc Validity Not Before: Jan 25 12:00:32 2026 GMT Not After : Jan 26 12:00:32 2026 GMT Subject: CN=bac468413d8e036a84655287f7356461d6acc48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:de:4d:b7:fb:f2:d2:ec:76:de:dc:1d:c6: 93:19:e8:11:ea:72:2f:37:71:78:ee:3d:7a:e2:be: 50:2c:63:07:6d:2e:43:70:5a:c0:2e:72:f0:53:25: d8:1b:b6:88:17:aa:7d:23:7e:ab:1c:08:73:e3:6e: 4a:a0:fe:18:a4:ad:c8:7e:17:e6:9a:ab:ca:38:39: 95:3d:27:39:c5:d5:2d:0d:61:5b:c9:7c:7b:26:67: 0a:95:96:d9:fb:65:2a:cc:09:83:e5:c7:e4:b7:bd: dc:27:c5:3b:c9:7f:07:30:5f:f3:fb:36:da:4e:88: 4f:67:56:f6:30:9f:17:cb:9e:44:b9:2e:2d:f6:4d: 08:90:c0:2d:8b:03:94:47:56:68:aa:61:a8:7e:bd: df:13:79:3e:73:46:70:93:04:c4:6d:e0:5a:5c:d4: f5:e2:b8:1b:13:17:dd:05:8f:51:ae:59:70:6d:7e: 86:af:28:91:96:b6:f2:2a:ec:49:80:2e:14:26:42: 4a:a6:70:0c:42:88:e5:20:85:47:8f:09:97:5d:36: 87:4b:27:55:dd:3b:7f:27:b8:ed:a5:42:e8:6b:b7: 0d:b1:b9:dc:56:92:01:9f:91:13:ef:a5:46:dc:79: 50:9d:dd:b5:56:b9:26:2c:9f:76:86:8a:26:ff:30: 92:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C4:68:41:3D:8E:03:6A:84:65:52:87:F7:35:64:61:D6:AC:C4:8C X509v3 Authority Key Identifier: keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:af:65:f5:6a:fa:9f:68:02:e4:75:4c:91:ac:0c:13:6e:83: 41:7f:8a:12:49:ed:a9:1b:c1:d6:ad:f6:1e:60:5d:65:25:3d: 5d:c1:70:0a:3b:bb:e2:0a:5e:c8:cd:86:68:ff:5c:30:2b:38: b7:0b:58:97:f3:9a:39:d7:b0:dc:90:9b:5f:db:a2:c3:70:f6: df:0f:4b:a7:b1:10:95:94:be:b9:00:52:03:6a:4a:d7:74:24: 76:6e:0b:7f:5c:8b:5b:db:ca:ad:9f:57:9c:04:26:1b:83:09: 77:65:ff:e9:4f:7f:91:d1:bb:f5:51:60:b1:a4:90:e5:35:e5: af:2e:2b:2d:93:d1:f1:f9:a0:cb:de:f6:30:dc:6c:41:5b:1e: f4:bc:94:6b:b8:44:65:00:5e:bd:98:e2:17:18:c7:83:47:58: 36:93:28:59:e3:30:a8:d5:74:6d:2f:0d:64:fb:c6:23:15:d5: d2:4f:c9:b7:6c:f3:2d:1b:77:6d:92:b9:ae:94:7c:0b:1d:5e: 46:f0:17:4e:ae:6c:86:13:cd:ae:b6:9f:84:c1:6d:ff:59:4e: 11:be:21:08:69:08:48:d5:df:e6:32:3a:5e:99:07:a4:fb:5c: c6:81:00:c5:03:c4:28:f5:ce:89:7c:ac:f1:ee:3c:20:f6:57: b9:0b:20:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BvbUcrUIUrOkZWh2FUfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGNjNTJhMDcwN2NjMzQwYWM5YzdmNmU5MDI4YjY0Yjcw MjY3YmMwHhcNMjYwMTI1MTIwMDMyWhcNMjYwMTI2MTIwMDMyWjAzMTEwLwYDVQQD EyhiYWM0Njg0MTNkOGUwMzZhODQ2NTUyODdmNzM1NjQ2MWQ2YWNjNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6jeTbf78tLsdt7cHcaTGegR6nIv N3F47j164r5QLGMHbS5DcFrALnLwUyXYG7aIF6p9I36rHAhz425KoP4YpK3Ifhfm mqvKODmVPSc5xdUtDWFbyXx7JmcKlZbZ+2UqzAmD5cfkt73cJ8U7yX8HMF/z+zba TohPZ1b2MJ8Xy55EuS4t9k0IkMAtiwOUR1ZoqmGofr3fE3k+c0ZwkwTEbeBaXNT1 4rgbExfdBY9RrllwbX6GryiRlrbyKuxJgC4UJkJKpnAMQojlIIVHjwmXXTaHSydV 3Tt/J7jtpULoa7cNsbncVpIBn5ET76VG3HlQnd21VrkmLJ92hoom/zCScQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrEaEE9jgNqhGVSh/c1ZGHWrMSMMB8GA1UdIwQY MBaAFEWMxSoHB8w0CsnH9ukCi2S3Ame8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81YTdkMmYtNTE2OC00NzIwLThjZTAt NzA0MTQ5NjE5YzQ2LzEvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81YTdkMmYtNTE2OC00NzIwLThjZTAtNzA0MTQ5NjE5YzQ2 LzEvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoa9l9Wr6 n2gC5HVMkawME26DQX+KEkntqRvB1q32HmBdZSU9XcFwCju74gpeyM2GaP9cMCs4 twtYl/OaOdew3JCbX9uiw3D23w9Lp7EQlZS+uQBSA2pK13Qkdm4Lf1yLW9vKrZ9X nAQmG4MJd2X/6U9/kdG79VFgsaSQ5TXlry4rLZPR8fmgy972MNxsQVse9LyUa7hE ZQBevZjiFxjHg0dYNpMoWeMwqNV0bS8NZPvGIxXV0k/Jt2zzLRt3bZK5rpR8Cx1e RvAXTq5shhPNrrafhMFt/1lOEb4hCGkISNXf5jI6XpkHpPtcxoEAxQPEKPXOiXys 8e48IPZXuQsg5A== -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:57 2026 by rpki-client